akm-cli 0.9.0-beta.52 → 0.9.0-beta.54

package/dist/indexer/walk/walker.js

@@ -148,20 +148,28 @@ function isInsideGitRepo(dir) {
  * read (e.g. permission errors).
  */
 export function* walkMarkdownFiles(root) {
-    let entries;
-    try {
-        entries = fs.readdirSync(root, { withFileTypes: true });
-    }
-    catch {
-        return;
-    }
-    for (const entry of entries) {
-        const full = path.join(root, entry.name);
-        if (entry.isDirectory()) {
-            yield* walkMarkdownFiles(full);
+    const stack = [root];
+    while (stack.length > 0) {
+        const current = stack.pop();
+        if (!current)
+            continue;
+        let entries;
+        try {
+            entries = fs.readdirSync(current, { withFileTypes: true });
         }
-        else if (entry.isFile() && entry.name.toLowerCase().endsWith(".md")) {
-            yield full;
+        catch {
+            continue;
+        }
+        for (const entry of entries) {
+            const full = path.join(current, entry.name);
+            if (entry.isSymbolicLink())
+                continue;
+            if (entry.isDirectory()) {
+                stack.push(full);
+            }
+            else if (entry.isFile() && entry.name.toLowerCase().endsWith(".md")) {
+                yield full;
+            }
         }
     }
 }

package/dist/integrations/agent/detect.js

@@ -55,6 +55,11 @@ export function defaultWhich(bin, envSource = process.env) {
     }
     return undefined;
 }
+let detectOverrides;
+/** TEST-ONLY. Swap the detection implementations; pass undefined to restore. */
+export function _setAgentDetectForTests(fakes) {
+    detectOverrides = fakes;
+}
 /**
  * Probe every resolvable agent profile (built-ins plus user overrides)
  * for an installed CLI.
@@ -64,6 +69,8 @@ export function defaultWhich(bin, envSource = process.env) {
  * @param whichFn  Binary lookup. Tests should inject a stub.
  */
 export function detectAgentCliProfiles(agent, whichFn = defaultWhich) {
+    if (detectOverrides?.detectAgentCliProfiles)
+        return detectOverrides.detectAgentCliProfiles(agent, whichFn);
     const profiles = listResolvedAgentProfiles(agent);
     return profiles.map((profile) => probeProfile(profile, whichFn));
 }
@@ -87,6 +94,8 @@ function probeProfile(profile, whichFn) {
  *      writing `agent.default`.
  */
 export function pickDefaultAgentProfile(results, existingDefault) {
+    if (detectOverrides?.pickDefaultAgentProfile)
+        return detectOverrides.pickDefaultAgentProfile(results, existingDefault);
     if (existingDefault) {
         const match = results.find((r) => r.name === existingDefault && r.available);
         if (match)

package/dist/integrations/agent/index.js

@@ -3,7 +3,7 @@
 // file, You can obtain one at https://mozilla.org/MPL/2.0/.
 export { getCommandBuilder } from "./builders.js";
 export { DEFAULT_AGENT_TIMEOUT_MS, listAgentProfileNames, listResolvedAgentProfiles, requireAgentProfile, resolveAgentProfile, resolveDefaultProfileName, resolveProfileFromConfig, } from "./config.js";
-export { defaultWhich, detectAgentCliProfiles, pickDefaultAgentProfile } from "./detect.js";
+export { _setAgentDetectForTests, defaultWhich, detectAgentCliProfiles, pickDefaultAgentProfile } from "./detect.js";
 export { listBuiltinModelAliases, resolveModel } from "./model-aliases.js";
 export { BUILTIN_AGENT_PROFILE_NAMES, getBuiltinAgentProfile, listBuiltinAgentProfiles, } from "./profiles.js";
 export { buildProposePrompt, buildReflectPrompt, buildSchemaRepairPrompt, extractDraftConfidence, parseAgentProposalPayload, } from "./prompts.js";

package/dist/llm/client.js

@@ -165,7 +165,19 @@ function isRetryable(err) {
     }
     return false;
 }
+// ── Test seam ────────────────────────────────────────────────────────────────
+// Swap-and-restore override. Inert in production; only tests call the setter.
+let chatCompletionOverride;
+/** TEST-ONLY. Swap the implementation of `chatCompletion`; pass undefined to restore. */
+export function _setChatCompletionForTests(fake) {
+    chatCompletionOverride = fake;
+}
 export async function chatCompletion(config, messages, options) {
+    if (chatCompletionOverride)
+        return chatCompletionOverride(config, messages, options);
+    return chatCompletionReal(config, messages, options);
+}
+async function chatCompletionReal(config, messages, options) {
     const effectiveTimeoutMs = options?.timeoutMs ?? config.timeoutMs ?? 120_000;
     const started = Date.now();
     try {

package/dist/llm/embedder.js

@@ -3,11 +3,26 @@
 // file, You can obtain one at https://mozilla.org/MPL/2.0/.
 import { embedCacheKey, getCachedEmbedding, setCachedEmbedding } from "./embedders/cache.js";
 import { DETERMINISTIC_EMBED_MODEL_ID, deterministicEmbed, isDeterministicEmbedEnabled, } from "./embedders/deterministic.js";
-import { DEFAULT_LOCAL_MODEL, isTransformersAvailable, LocalEmbedder } from "./embedders/local.js";
+import { DEFAULT_LOCAL_MODEL, isTransformersAvailable as isTransformersAvailableReal, LocalEmbedder, } from "./embedders/local.js";
 import { hasRemoteEndpoint, RemoteEmbedder } from "./embedders/remote.js";
 // ── Re-exports (public API) ─────────────────────────────────────────────────
 export { clearEmbeddingCache } from "./embedders/cache.js";
-export { DEFAULT_LOCAL_MODEL, isTransformersAvailable } from "./embedders/local.js";
+export { _setTransformersLoaderForTests, DEFAULT_LOCAL_MODEL } from "./embedders/local.js";
+let embedderOverrides;
+/** TEST-ONLY. Swap embedder implementations; pass undefined to restore. */
+export function _setEmbedderForTests(fakes) {
+    embedderOverrides = fakes;
+}
+/**
+ * Check whether the @huggingface/transformers package is importable.
+ * Delegating wrapper around `./embedders/local`'s probe so tests can swap it
+ * via {@link _setEmbedderForTests}.
+ */
+export function isTransformersAvailable() {
+    if (embedderOverrides?.isTransformersAvailable)
+        return embedderOverrides.isTransformersAvailable();
+    return isTransformersAvailableReal();
+}
 // ── Singleton local embedder ────────────────────────────────────────────────
 // `_localEmbedder` is an intentional module-level singleton but constructed
 // lazily on first use. The underlying @huggingface/transformers pipeline is
@@ -40,6 +55,8 @@ export function resetLocalEmbedder() {
  * and embedding config. Repeated identical queries return the cached vector.
  */
 export async function embed(text, embeddingConfig, signal) {
+    if (embedderOverrides?.embed)
+        return embedderOverrides.embed(text, embeddingConfig, signal);
     // Deterministic mode (env-gated, test/bench only): model-free, stable.
     if (isDeterministicEmbedEnabled()) {
         return deterministicEmbed(text);
@@ -61,6 +78,8 @@ export async function embed(text, embeddingConfig, signal) {
  * which processes texts in chunks of 32 for genuine batched inference.
  */
 export async function embedBatch(texts, embeddingConfig, signal) {
+    if (embedderOverrides?.embedBatch)
+        return embedderOverrides.embedBatch(texts, embeddingConfig, signal);
     if (texts.length === 0)
         return [];
     // Deterministic mode (env-gated, test/bench only): model-free, stable.
@@ -104,6 +123,8 @@ export { cosineSimilarity } from "./embedders/types.js";
  *   - No config: use `DEFAULT_LOCAL_MODEL` (the shared singleton model).
  */
 export function resolveEmbeddingModelId(embeddingConfig) {
+    if (embedderOverrides?.resolveEmbeddingModelId)
+        return embedderOverrides.resolveEmbeddingModelId(embeddingConfig);
     if (isDeterministicEmbedEnabled())
         return DETERMINISTIC_EMBED_MODEL_ID;
     if (!embeddingConfig)
@@ -117,6 +138,9 @@ export function resolveEmbeddingModelId(embeddingConfig) {
  * Check whether embedding is available with a detailed reason on failure.
  */
 export async function checkEmbeddingAvailability(embeddingConfig) {
+    if (embedderOverrides?.checkEmbeddingAvailability) {
+        return embedderOverrides.checkEmbeddingAvailability(embeddingConfig);
+    }
     // Deterministic mode (env-gated): always available — no model, no network.
     if (isDeterministicEmbedEnabled()) {
         return { available: true };

package/dist/llm/embedders/local.js

@@ -28,6 +28,12 @@ function isBatchTensor(v) {
         Array.isArray(v.dims) &&
         v.dims.length >= 2);
 }
+const realTransformersLoader = () => import("@huggingface/transformers");
+let transformersLoader = realTransformersLoader;
+/** TEST-ONLY. Swap the transformers module loader; pass undefined to restore. */
+export function _setTransformersLoaderForTests(fake) {
+    transformersLoader = fake ?? realTransformersLoader;
+}
 const LOCAL_EMBEDDER_DTYPE = "fp32";
 const LOCAL_EMBEDDER_FALLBACK_DTYPE = "auto";
 /**
@@ -180,7 +186,7 @@ export class LocalEmbedder {
                 }
                 let pipeline;
                 try {
-                    const mod = await import("@huggingface/transformers");
+                    const mod = await transformersLoader();
                     pipeline = mod.pipeline;
                 }
                 catch (importError) {

package/dist/llm/feature-gate.js

@@ -24,8 +24,12 @@ const FEATURE_LOCATION = {
     metadata_enhance: (cfg) => cfg.index?.metadataEnhance?.enabled ?? false,
     // Legacy default: false
     curate_rerank: (cfg) => cfg.search?.curateRerank?.enabled ?? false,
-    // Legacy default: false
-    lesson_quality_gate: (cfg) => cfg.profiles?.improve?.default?.processes?.distill?.qualityGate?.enabled ?? false,
+    // Default ON since R3 (docs/design/improve-self-learning-analysis.md G5):
+    // distill is a primary acquisition path and the judge fails open (no LLM /
+    // timeout / parse failure all pass through), so the gate only ever filters
+    // when a judge verdict actually exists. Opt out via
+    // profiles.improve.default.processes.distill.qualityGate.enabled: false.
+    lesson_quality_gate: (cfg) => cfg.profiles?.improve?.default?.processes?.distill?.qualityGate?.enabled ?? true,
     // Legacy default: false
     proposal_quality_gate: (cfg) => cfg.profiles?.improve?.default?.processes?.reflect?.qualityGate?.enabled ?? false,
     // Legacy default: false

package/dist/output/renderers.js

@@ -364,23 +364,21 @@ const scriptSourceRenderer = {
 };
 // ── 8. env-file ───────────────────────────────────────────────────────────────
 /**
- * Env renderer. Returns ONLY key names and start-of-line comments — never
- * values. Deliberately omits content/template/prompt so env values cannot leak
- * through `akm show`.
+ * Env renderer. Returns ONLY key names — never values, and never comment
+ * text (comments routinely contain commented-out credentials). Deliberately
+ * omits content/template/prompt so env values cannot leak through `akm show`.
  */
 const envFileRenderer = {
     name: "env-file",
     buildShowResponse(ctx) {
         const name = deriveName(ctx);
-        const { keys, comments } = listVaultKeys(ctx.absPath);
+        const { keys } = listVaultKeys(ctx.absPath);
         return {
             type: "env",
             name,
             path: ctx.absPath,
-            action: "Environment — keys + comments only. Use `akm env run <ref> -- <command>` to run with the whole .env injected; prefer `--clean` to minimize inherited parent env. AKM itself does not print values, but child stdout/stderr is not redacted. `akm env export <ref> --out <file>` writes a sourceable script to a file. Never `source` the raw file. Values stay on disk and are never written to akm's stdout.",
-            description: comments.length > 0 ? comments.join("\n") : undefined,
+            action: "Environment — key names only. Use `akm env run <ref> -- <command>` to run with the whole .env injected; prefer `--clean` to minimize inherited parent env. AKM itself does not print values, but child stdout/stderr is not redacted. `akm env export <ref> --out <file>` writes a sourceable script to a file. Never `source` the raw file. Values stay on disk and are never written to akm's stdout.",
             keys,
-            comments,
         };
     },
     enrichSearchHit(hit, _stashDir) {
@@ -647,12 +645,9 @@ function applyScriptMetadata(entry, ctx) {
     }
 }
 function applyEnvMetadata(entry, ctx) {
-    const { keys, comments } = listVaultKeys(ctx.absPath);
-    if (comments.length > 0 && !entry.description) {
-        entry.description = comments.join(" ").slice(0, 500);
-        entry.source = "comments";
-        entry.confidence = 0.7;
-    }
+    // Key names only — comment text must never reach description/search_text
+    // (comments routinely contain commented-out credentials).
+    const { keys } = listVaultKeys(ctx.absPath);
     if (keys.length > 0) {
         entry.searchHints = keys;
     }

package/dist/output/shapes/helpers.js

@@ -369,7 +369,6 @@ export function shapeShowOutput(result, detail, shape = "human") {
             "workflowParameters",
             "steps",
             "keys",
-            "comments",
             "related",
         ]);
     }
@@ -385,7 +384,6 @@ export function shapeShowOutput(result, detail, shape = "human") {
             "run",
             "origin",
             "keys",
-            "comments",
             "related",
         ]);
     }
@@ -411,7 +409,6 @@ export function shapeShowOutput(result, detail, shape = "human") {
         "cwd",
         "activeRun",
         "keys",
-        "comments",
         "related",
         // path and editable are always projected so JSON consumers can locate and
         // edit the asset without needing --detail full (QA #7).

package/dist/output/shapes/passthrough.js

@@ -42,6 +42,7 @@ const PASSTHROUGH_COMMANDS = [
     "extract",
     "health",
     "improve",
+    "improve-canary",
     "lessons-coverage",
     "import",
     "index",